CVE-2025-55077— Tyler Technologies ERP Pro 9 SaaS application escape
Quick assessment
Affected
Tyler Technologies ERP Pro 9 SaaS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Tyler Technologies ERP Pro 9 SaaS是美国Tyler Technologies公司的一个企业资源规划软件。 Tyler Technologies ERP Pro 9 SaaS存在安全漏洞，该漏洞源于已验证用户可执行有限操作系统命令。
Possible ATT&CK Techniques 1 AI
T1505.003 · Web Shell
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-55077
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Tyler Technologies ERP Pro 9 SaaS application escape
Source: CVE Program / CVE List V5
Vulnerability Description
Tyler Technologies ERP Pro 9 SaaS allows an authenticated user to escape the application and execute limited operating system commands within the remote Microsoft Windows environment with the privileges of the authenticated user. Tyler Technologies deployed hardened remote Windows environment settings to all ERP Pro 9 SaaS customer environments as of 2025-08-01.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
带着不必要的权限执行
Source: CVE Program / CVE List V5
Vulnerability Title
Tyler Technologies ERP Pro 9 SaaS 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Tyler Technologies ERP Pro 9 SaaS是美国Tyler Technologies公司的一个企业资源规划软件。 Tyler Technologies ERP Pro 9 SaaS存在安全漏洞，该漏洞源于已验证用户可执行有限操作系统命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Tyler Technologies | ERP Pro 9 SaaS | 0 ~ 2025-08-01 | - |
|
II. Public POCs for CVE-2025-55077
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-55077
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same vendor: Tyler Technologies
-
CVE-2026-44159
Tyler Identity Local (TID-L) default administrative credenti -
CVE-2023-6375
Tyler Technologies Magistrate Court Case Management Plus sto -
CVE-2023-6354
Tyler Technologies Magistrate Court Case Management Plus PDF -
CVE-2023-6353
Tyler Technologies Civil and Criminal Electronic Filing Uplo -
CVE-2023-6344
Tyler Technologies Court Case Management Plus use of Aquafor
Same weakness: CWE-250
-
CVE-2026-104795
Insights-runtime-extractor: insights-runtime-extractor: cont -
CVE-2026-110150
Chrome <155.0.8059.79 Windows安装程序提权漏洞 -
CVE-2026-87709
Windows Host Guardian Service Tampering Vulnerability -
CVE-2026-65162
NVIDIA AIStore ETL API远程代码执行漏洞 -
CVE-2026-75621
IBM Aspera Enterprise Webapps Execution with Unnecessary Pri
V. Comments for CVE-2025-55077
No comments yet